add LIBKRB5_LDADD/LIBKRB5_DPADD and their static counterparts
to bsd.prog.mk. use them instead of hard coding various lists
of libraries for krb5.

this fixes static builds.

add sqlite3

branches: 1.44.8; 1.44.10; 1.44.12; 1.44.16; 1.44.18;
Keep the built-in support for passwd -k, but don't make the kpasswd link or
install the kpasswd man page since these are provided by heimdal. I ifdef'ed
them so that the code to install them is still with the Makefile.

don't build kpasswd; heimdal does it for us.

branches: 1.42.4; 1.42.6; 1.42.10; 1.42.12; 1.42.14;
We no longer need -I/usr/include/krb5.

Add new Makefile knob, USE_FORT, which extends USE_SSP by turning on the
FORTIFY_SOURCE feature of libssp, thus checking the size of arguments to
various string and memory copy and set functions (as well as a few system
calls and other miscellany) where known at function entry. RedHat has
evidently built all "core system packages" with this option for some time.

This option should be used at the top of Makefiles (or Makefile.inc where
this is used for subdirectories) but after any setting of LIB.

This is only useful for userland code, and cannot be used in libc or in
any code which includes the libc internals, because it overrides certain
libc functions with macros. Some effort has been made to make USE_FORT=yes
work correctly for a full-system build by having the bsd.sys.mk logic
disable the feature where it should not be used (libc, libssp iteself,
the kernel) but no attempt has been made to build the entire system with
USE_FORT and doing so will doubtless expose numerous bugs and misfeatures.

Adjust the system build so that all programs and libraries that are setuid,
directly handle network data (including serial comm data), perform
authentication, or appear likely to have (or have a history of having)
data-driven bugs (e.g. file(1)) are built with USE_FORT=yes by default,
with the exception of libc, which cannot use USE_FORT and thus uses
only USE_SSP by default. Tested on i386 with no ill results; USE_FORT=no
per-directory or in a system build will disable if desired.

Introduce PAM_STATIC_LDADD and PAM_STATIC_DPADD. When compiling
with MKPIC=no, possibly because the target does not support shared
libraries, these include libraries required to resolve all symbols
which end up referenced from PAM-using applications. The libraries
presently required are -lcrypt, -lrpcsvc and -lutil.

Add use of these variables which are currently set up to use PAM,
so that they compile when MKPIC=no.

Also, in the telnetd case, reorder the order of the libraries, so
that libtelnet.a comes before -ltermcap and -lutil, again to fix
link error when MKPIC=no.

Discussed with thorpej and christos.

Remove COPTS+=-g.

Magor rework of passwd(1) for the PAM case. Add "-d <database>" option,
similar to Solaris's "-r <repository" or Mac OS X's "-i <infosystem>",
to select the password database (files, nis, krb5). Otherwise, we default
to using whatever PAM decides.

Add a PAM passwd module.
XXX: This avoids the issue of supporting separate -l -y -k, but is the behavior
correct? Should passwd -p disable all other passwd methods? Should it become
the default if compiled in?

use pw_gensalt() and don't dig into libcrypt.

Add support for SHA1 hashed passwords.
The algorithm used is essentially PBKDF1 from RFC 2898 but using
hmac_sha1 rather than SHA1 directly (suggested by smb@research.att.com).

* The format of the encrypted password is:
* $<tag>$<iterations>$<salt>$<digest>
*
* where:
* <tag> is "sha1"
* <iterations> is an unsigned int identifying how many rounds
* have been applied to <digest>. The number
* should vary slightly for each password to make
* it harder to generate a dictionary of
* pre-computed hashes. See crypt_sha1_iterations.
* <salt> up to 64 bytes of random data, 8 bytes is
* currently considered more than enough.
* <digest> the hashed password.

hmac.c implementes HMAC as defined in RFC 2104 and includes a unit
test for both hmac_sha1 and hmac_sha1 using a selection of the Known
Answer Tests from RFC 2202.

It is worth noting that to be FIPS compliant the hmac key (password)
should be 10-20 chars.

remove unnecessary rules

Don't build a separate kpasswd program, passwd can handle Kerberos
password changing. Fixes last part of bin/14988.

add DPADD.

Split the notion of building Hesiod, Kerberos, S/key, and YP
infrastructure and using that infrastructure in programs.

* MKHESIOD, MKKERBEROS, MKSKEY, and MKYP control building
of the infratsructure (libraries, support programs, etc.)

* USE_HESIOD, USE_KERBEROS, USE_SKEY, and USE_YP control
building of support for using the corresponding API
in various libraries/programs that can use it.

As discussed on tech-toolchain.

Remove INSTALLFLAGS=-fschg, as per change to usr.bin/ssh/ssh/Makefile.

remove -lvers, it's not used

update build infrastructure for heimdal 0.3a

Add pwd_gensalt() - generates password salt/setting for crypt(), based upon
target user and information obtained from passwd.conf. From OpenBSD.

Add a MKKERBEROS check to enable/disable kerberos support during the build.

branches: 1.25.2;
Merge a bunch of things from crypto-us and crypto-intl into basesrc,
adding support for Heimdal/KTH Kerberos where easy to do so. Eliminate
bsd.crypto.mk.

There is still a bunch more work to do, but crypto is now more-or-less
fully merged into the base NetBSD distribution.

branches: 1.24.2;
Wrap login.conf database access in ifdef LOGIN_CAP.

Fix yppasswd part of passwd. This has never worked since the
password map was split and master.passwd.byname was introduced.

XXX This is a temporary fix until luke finds some time to add
the necessary support glue to libc for TRT.

optionally include CRYPTOPATH Makefile.frag files.

Use bsd.crypto.mk.

Remove the crypto-related bits until such time as we have a fully-
integrated source tree. Export-controlled versions of these are now
built during the domestic build process.

use CPPFLAGS instead of CFLAGS

branches: 1.18.2;
find "namespace.h" ...

Back out the .PATH.c changes. The .depend problem (and others)
will be fixed using the new .NOPATH make feature instead.

Use .PATH.c: ...

remove vestigal Berkeley kpasswdd support

Sync with 4.4BSD-Lite2 (whew!)

Slight semantics change: ALWAYS use YP if the system is bound to a
YP server. This is required if the passwd database is to stay in sync
if this program is run on the YP server. Note, local passwd database
operations can still be performed by passing the -l flag.

Also, some minor cleanup and RCS id police.

Updated to use new password file functions in libutil.
From Greg Hudson <ghudson@MIT.EDU>.

Fix minor -Ibooboo

Make passwd work with a link to yppasswd. (From Jason Thorpe)

Patch from Giles Lean to make compilation flags more consistent.

Fix krb4 build. From Michael Graff <explorer@vorpal.com>

branches: 1.7.2;
Add conditional kerberosIV and kerberos5 support

always use libcrypt

Add RCS identifiers.

Add YP support.

changed to use new libcrypt scheme.

added support for using real crypt

branches: 1.1.1;
Initial revision

Remove K&R __P macros.
Remove main() function prototype if present.
Mark usage() as __dead if not already.
Binaries generated with & without these patches were compared with diff -r.

Use __dead

Get rid of more Kerberos 4 code.

Magor rework of passwd(1) for the PAM case. Add "-d <database>" option,
similar to Solaris's "-r <repository" or Mac OS X's "-i <infosystem>",
to select the password database (files, nis, krb5). Otherwise, we default
to using whatever PAM decides.

Add a PAM passwd module.
XXX: This avoids the issue of supporting separate -l -y -k, but is the behavior
correct? Should passwd -p disable all other passwd methods? Should it become
the default if compiled in?

use pw_gensalt() and don't dig into libcrypt.

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22365, verified by myself.

Declare pwd_gensalt().

branches: 1.7.4;
Modularize password changing mechanisms, as proposed in
<20000130122641.A8134@xanadu.kublai.com>:
Subject: PROPOSAL: making passwd pluggable (sort of)
Date: Sun, 30 Jan 2000 12:26:41 -0500

Separate kerberos5 implementation from kerberos4.

WARNSify, fix .Nm usage

remove vestigal Berkeley kpasswdd support

Fix RCS ID, and clean up extra newline at end of file.

Sync with 4.4BSD-Lite2 (whew!)

branches: 1.1.1;
Initial revision

Convert TNF licenses to new 2 clause variant

branches: 1.2.26;
infomration -> information.

Magor rework of passwd(1) for the PAM case. Add "-d <database>" option,
similar to Solaris's "-r <repository" or Mac OS X's "-i <infosystem>",
to select the password database (files, nis, krb5). Otherwise, we default
to using whatever PAM decides.

remove vestigal Berkeley kpasswdd support

Sync with 4.4BSD-Lite2 (whew!)

Slight semantics change: ALWAYS use YP if the system is bound to a
YP server. This is required if the passwd database is to stay in sync
if this program is run on the YP server. Note, local passwd database
operations can still be performed by passing the -l flag.

Also, some minor cleanup and RCS id police.

branches: 1.1.1; 1.1.2;
Add conditional kerberosIV and kerberos5 support

- fix non pam build
- merge duplicated error code
- fix opt struct leak

branches: 1.19.4; 1.19.6;
Stop using functions deprecated by Heimdal. Also, if krb5_init_context()
fails, we can't use Kerberos functions to grab error strings, we
resort to strerror(3) which is what Heimdal's deprecated function
does in this case.

avoid compiler warnings about shadowed declarations.

branches: 1.17.8;
Remove clause 3 and 4 from TNF licenses

Apply the change in rev 1.15 also to the non PAM code.

branches: 1.15.2;
Import Heimdal-1.1

minor lint

branches: 1.13.18;
Magor rework of passwd(1) for the PAM case. Add "-d <database>" option,
similar to Solaris's "-r <repository" or Mac OS X's "-i <infosystem>",
to select the password database (files, nis, krb5). Otherwise, we default
to using whatever PAM decides.

Switch to krb5_set_password that can handle the RFC3244 (and the older
change password protocol)

branches: 1.11.4;
upgrade openssl to 0.9.7b. (AES is now supported)
alter des.h to be friendly with openssl/des.h (you can include both in the
same file)
make libkrb to depend on libdes. bump major.
massage various portioin of heimdal to be friendly with openssl 0.9.7b.

In krb5_end, don't try to free the krb5 context if it's not yet
been initialized. Fixes coredump when passwd is called as 'yppasswd'.

- Pull in pwd.h since `struct passwd' is now used in extern.h.
- Use pwd_gensalt().

branches: 1.8.2; 1.8.4;
Merge a bunch of things from crypto-us and crypto-intl into basesrc,
adding support for Heimdal/KTH Kerberos where easy to do so. Eliminate
bsd.crypto.mk.

There is still a bunch more work to do, but crypto is now more-or-less
fully merged into the base NetBSD distribution.

Modularize password changing mechanisms, as proposed in
<20000130122641.A8134@xanadu.kublai.com>:
Subject: PROPOSAL: making passwd pluggable (sort of)
Date: Sun, 30 Jan 2000 12:26:41 -0500

- use an array MAXHOSTNAMELEN+1 size to hold hostnames
- ensure hostname from gethostname() is nul-terminated in all cases
- minor KNF
- use MAXHOSTNAMELEN over various other values/defines
- be safe will buffers that hold hostnames

WARNSify, fix .Nm usage

remove dangerous sprintf and strcpy calls.

remove vestigal Berkeley kpasswdd support

Slight semantics change: ALWAYS use YP if the system is bound to a
YP server. This is required if the passwd database is to stay in sync
if this program is run on the YP server. Note, local passwd database
operations can still be performed by passing the -l flag.

Also, some minor cleanup and RCS id police.

branches: 1.1.2;
Add conditional kerberosIV and kerberos5 support

remove vestigal Berkeley kpasswdd support

Sync with 4.4BSD-Lite2 (whew!)

Slight semantics change: ALWAYS use YP if the system is bound to a
YP server. This is required if the passwd database is to stay in sync
if this program is run on the YP server. Note, local passwd database
operations can still be performed by passing the -l flag.

Also, some minor cleanup and RCS id police.

branches: 1.1.1; 1.1.2;
Add conditional kerberosIV and kerberos5 support

s/Aborb/Absorb/ in comment.

fix non-PAM build

branches: 1.35.2;
NULL does not need a cast

Log successful and unsuccessful attempts to change passwords, via -l
or pam, to ease IT audit guideline compliance. Patch from Richard
Hansen of BBN in private mail.

Proposed on tech-kern with positive comments, except a suggestion I
didn't implement:

A possible future enhancement is refraining from logging if the old
password is empty, as some people abort password changing that way.
However, it's not clear if this complies with most guidelines that
require password change logging, and at first glance that appears to
be a fairly difficult change.

Rename variables to fix GCC warnings: local variables optopt and optarg
shadow globals.

Fix WARNS=4 issues

branches: 1.31.10; 1.31.12;
minor lint

branches: 1.30.18;
Magor rework of passwd(1) for the PAM case. Add "-d <database>" option,
similar to Solaris's "-r <repository" or Mac OS X's "-i <infosystem>",
to select the password database (files, nis, krb5). Otherwise, we default
to using whatever PAM decides.

adapt to pw_gensalt() changes.

use pw_gensalt() and don't dig into libcrypt.

Add (unsigned char) cast to ctype functions
A password containg 80...ff could be reported (incorrectly) as being
all lower case.

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22365, verified by myself.

use strlcpy

Slight change to previous: rebuild the insecure password db if the expiry
time has changed, not just been set.

Update for pw_mkdb() change: restrict updates to one user's records and/or
the secure database where appropriate.

Back out previous.

When not running as the super-user: if the user's password has expired or is
due to expire within _PASSWORD_WARNDAYS (or the setting from login.conf),
force the user to set a different password than the one they are currently
using. (Yes, it's actually worthwhile doing this.)

- Pull in pwd.h since `struct passwd' is now used in extern.h.
- Use pwd_gensalt().

branches: 1.19.4;
Modularize password changing mechanisms, as proposed in
<20000130122641.A8134@xanadu.kublai.com>:
Subject: PROPOSAL: making passwd pluggable (sort of)
Date: Sun, 30 Jan 2000 12:26:41 -0500

Wrap login.conf database access in ifdef LOGIN_CAP.

Changes to passwd(1) for login.conf. Supported capabilities are
minpasswordlen and passwordtime (expiry time).

KNF. ensure buffers are nul-terminated.

Need <time.h> for time() prototype.

WARNSify, fix .Nm usage

Changes to close PR3806. (Different than in PR.)
-- don't lock passwd until data is collected.
-- save a copy of original pw data for pw_copy checking
-- Try several times to lock passwd

Tidy up printf formats in "don't use all lower case" warning
message. From Dave Huang <khym@bga.com>, PR #3198.

remove dangerous sprintf and strcpy calls.

Sync with 4.4BSD-Lite2 (whew!)

Slight semantics change: ALWAYS use YP if the system is bound to a
YP server. This is required if the passwd database is to stay in sync
if this program is run on the YP server. Note, local passwd database
operations can still be performed by passing the -l flag.

Also, some minor cleanup and RCS id police.

Updated to use new password file functions in libutil.
From Greg Hudson <ghudson@MIT.EDU>.

needs string.h

rationalize & cleanup -y/-k/-l code
update man page for -y
yp password setting now works again!
relax passwd setting retry code a teeny bit

Add RCS identifiers.

Return status instead of exiting.

changed to use new libcrypt scheme.

Fixed problem where users with a blank password field can't change their
password.

branches: 1.1.1;
Initial revision

usr.bin: remove unnecessary lint comment CONSTCOND

Since 2021-01-31, lint no longer warns about 'do ... while (0)'.

No functional change.

Do not call pam_end with an invalid handle if pam_start failed.
From Richard Hansen.

Log successful and unsuccessful attempts to change passwords, via -l
or pam, to ease IT audit guideline compliance. Patch from Richard
Hansen of BBN in private mail.

Proposed on tech-kern with positive comments, except a suggestion I
didn't implement:

A possible future enhancement is refraining from logging if the old
password is empty, as some people abort password changing that way.
However, it's not clear if this complies with most guidelines that
require password change logging, and at first glance that appears to
be a fairly difficult change.

branches: 1.4.18; 1.4.24;
Display a message indicating who's password is being changed, as per
Jeremy Reed on tech-userlevel.

branches: 1.3.2; 1.3.4; 1.3.10; 1.3.12;
Magor rework of passwd(1) for the PAM case. Add "-d <database>" option,
similar to Solaris's "-r <repository" or Mac OS X's "-i <infosystem>",
to select the password database (files, nis, krb5). Otherwise, we default
to using whatever PAM decides.

Add missing RCS ID.

Add a PAM passwd module.
XXX: This avoids the issue of supporting separate -l -y -k, but is the behavior
correct? Should passwd -p disable all other passwd methods? Should it become
the default if compiled in?

Xref pwhash(1),
pointed out by Stefan Schumacher at the Chemnitz Linuxdays

YP password -> NIS password. Ok'd by thorpej.

user -> principal in the krb5 synopsis.

Fix a typo, and sort SEE ALSO correctly.

Magor rework of passwd(1) for the PAM case. Add "-d <database>" option,
similar to Solaris's "-r <repository" or Mac OS X's "-i <infosystem>",
to select the password database (files, nis, krb5). Otherwise, we default
to using whatever PAM decides.

Drop some whitespace
XXX: -p not described.

Add a PAM passwd module.
XXX: This avoids the issue of supporting separate -l -y -k, but is the behavior
correct? Should passwd -p disable all other passwd methods? Should it become
the default if compiled in?

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22365, verified by myself.

Document when Kerberos will be used.
fixes part of bin/14988

New sentence, new line.

Whitespace cleanup.

Back out previous.

Document new behaviour WRT password expiry, and Xr login.conf.

English.

Adapt to addition of passwd.conf.

branches: 1.13.4;
Modularize password changing mechanisms, as proposed in
<20000130122641.A8134@xanadu.kublai.com>:
Subject: PROPOSAL: making passwd pluggable (sort of)
Date: Sun, 30 Jan 2000 12:26:41 -0500

More and more .Os cleanups. .Os is defined in the tmac.doc-common file,
so we shouldn't override it with versions in the manpages. Many more to
come.

Added test to allow fallback to local password database if YP passwd map
is not found. Fixes both PRs 4142 and 4557 (4558). Still fails properly
if user is in YP and not in local database. Man page fixed to reflect
current logic behind falling back, changed since YP was made default some
time ago.

add missing .Nm sections.

branches: 1.9.2;
WARNSify, fix .Nm usage

remove vestigal Berkeley kpasswdd support

Sync with 4.4BSD-Lite2 (whew!)

Slight semantics change: ALWAYS use YP if the system is bound to a
YP server. This is required if the passwd database is to stay in sync
if this program is run on the YP server. Note, local passwd database
operations can still be performed by passing the -l flag.

Also, some minor cleanup and RCS id police.

Make passwd work with a link to yppasswd. (From Jason Thorpe)

Fix spelling errors.

rationalize & cleanup -y/-k/-l code
update man page for -y
yp password setting now works again!
relax passwd setting retry code a teeny bit

Add RCS indentifiers.

branches: 1.1.1;
Initial revision

fix compile error without USE_PAM (-Werror,-Wmissing-noreturn)

Remove K&R __P macros.
Remove main() function prototype if present.
Mark usage() as __dead if not already.
Binaries generated with & without these patches were compared with diff -r.

Rename variables to fix GCC warnings: local variables optopt and optarg
shadow globals.

Fix WARNS=4 issues

branches: 1.28.6;
Remove the \n and tabs from the __COPYRIGHT() strings.
Tweak to use a consistent format.

branches: 1.27.6;
minor lint

branches: 1.26.12;
Get rid of more Kerberos 4 code.

Magor rework of passwd(1) for the PAM case. Add "-d <database>" option,
similar to Solaris's "-r <repository" or Mac OS X's "-i <infosystem>",
to select the password database (files, nis, krb5). Otherwise, we default
to using whatever PAM decides.

Add a PAM passwd module.
XXX: This avoids the issue of supporting separate -l -y -k, but is the behavior
correct? Should passwd -p disable all other passwd methods? Should it become
the default if compiled in?

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22365, verified by myself.

80 column police.

convert to use getprogname()

- Pull in pwd.h since `struct passwd' is now used in extern.h.
- Use pwd_gensalt().

Make gcc 2.96 (and maybe earlier) happier. Include <stdlib.h>,<string.>,
etc. as appropriate to get exit,srncmp,abs,abort,etc.
Add -I${.CURDIR} to a few Makefiles

branches: 1.18.4;
Don't declare 'extern opt*' getopt variables.

use NULL

Modularize password changing mechanisms, as proposed in
<20000130122641.A8134@xanadu.kublai.com>:
Subject: PROPOSAL: making passwd pluggable (sort of)
Date: Sun, 30 Jan 2000 12:26:41 -0500

Separate kerberos5 implementation from kerberos4.

it doesn't make any sense to use -u with -r or -i, so don't permit it.

KNF. ensure buffers are nul-terminated.

WARNSify, fix .Nm usage

remove vestigal Berkeley kpasswdd support

Sync with 4.4BSD-Lite2 (whew!)

Fix a semantic problem reported by Chuck Cranor:

If a user wishes to change a password on a system running YP, and
the master server is not running rpc.yppasswdd, passwd(1) would fail,
even if the user had a local entry. Fix this by checking for local
entry if master is not running rpc.yppasswd iff we defaulted to using
YP (not invoked as "yppasswd" or with "-y").

Slight semantics change: ALWAYS use YP if the system is bound to a
YP server. This is required if the passwd database is to stay in sync
if this program is run on the YP server. Note, local passwd database
operations can still be performed by passing the -l flag.

Also, some minor cleanup and RCS id police.

Make passwd work with a link to yppasswd. (From Jason Thorpe)

branches: 1.6.2;
Add conditional kerberosIV and kerberos5 support

rationalize & cleanup -y/-k/-l code
update man page for -y
yp password setting now works again!
relax passwd setting retry code a teeny bit

Add RCS identifiers.

Change NIS--> YP

Add YP support.

branches: 1.1.1;
Initial revision

gc unused file.

Add support for SHA1 hashed passwords.
The algorithm used is essentially PBKDF1 from RFC 2898 but using
hmac_sha1 rather than SHA1 directly (suggested by smb@research.att.com).

* The format of the encrypted password is:
* $<tag>$<iterations>$<salt>$<digest>
*
* where:
* <tag> is "sha1"
* <iterations> is an unsigned int identifying how many rounds
* have been applied to <digest>. The number
* should vary slightly for each password to make
* it harder to generate a dictionary of
* pre-computed hashes. See crypt_sha1_iterations.
* <salt> up to 64 bytes of random data, 8 bytes is
* currently considered more than enough.
* <digest> the hashed password.

hmac.c implementes HMAC as defined in RFC 2104 and includes a unit
test for both hmac_sha1 and hmac_sha1 using a selection of the Known
Answer Tests from RFC 2202.

It is worth noting that to be FIPS compliant the hmac key (password)
should be 10-20 chars.

use bounded string op

use strlcpy

password hashing utility that allows des, md5 or bcrypt passwords to be
created in scripts; tool originally from downsj@openbsd.org;
approved by perry.

use arc4random

support bcrypt password. can be chosen by "blowfish" keyword in passwd.conf.
from openbsd

branches: 1.5.2; 1.5.4;
Fix warning message.

- sizeof(), not constants.
- snprintf() will always terminate the output string.
- Spacing.

__RCSID().

Use ':' as group prefix; suggested by hubertf.

Add pwd_gensalt() - generates password salt/setting for crypt(), based upon
target user and information obtained from passwd.conf. From OpenBSD.

s/Abosrb/Absorb/ in comment.

fix non-PAM build

branches: 1.36.2;
Use __dead

KNF, make error messages consistent.

PR/43852: Wolfgang Stukenbrock: yp_passwd command may destroy NIS database
entries when used on a server that includes users via netgroups.

Fix WARNS=4 issues

branches: 1.32.10; 1.32.12;
PR/37863: Wolfgang Stukenbrock: yp_passwd command may destroy NIS database entries when used on a server that includes users via netgroups

branches: 1.31.18;
Magor rework of passwd(1) for the PAM case. Add "-d <database>" option,
similar to Solaris's "-r <repository" or Mac OS X's "-i <infosystem>",
to select the password database (files, nis, krb5). Otherwise, we default
to using whatever PAM decides.

adapt to pw_gensalt() changes.

use pw_gensalt() and don't dig into libcrypt.

Add (unsigned char) cast to ctype functions
A password containg 80...ff could be reported (incorrectly) as being
all lower case.

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22365, verified by myself.

error handling on strdup failure

use strlcpy

__progname not used here, so don't extern it

- Pull in pwd.h since `struct passwd' is now used in extern.h.
- Use pwd_gensalt().

branches: 1.22.4;
Modularize password changing mechanisms, as proposed in
<20000130122641.A8134@xanadu.kublai.com>:
Subject: PROPOSAL: making passwd pluggable (sort of)
Date: Sun, 30 Jan 2000 12:26:41 -0500

Fix yppasswd part of passwd. This has never worked since the
password map was split and master.passwd.byname was introduced.

XXX This is a temporary fix until luke finds some time to add
the necessary support glue to libc for TRT.

Spell "privilege" correctly (correct spelling from Jonathan Stone).

branches: 1.19.2;
const poisoning.

avoid print extra : as noted by Benjamin Lorenz <lorenz@ps.uni-sb.de> in bin/5745

KNF. ensure buffers are nul-terminated.

Added test to allow fallback to local password database if YP passwd map
is not found. Fixes both PRs 4142 and 4557 (4558). Still fails properly
if user is in YP and not in local database. Man page fixed to reflect
current logic behind falling back, changed since YP was made default some
time ago.

branches: 1.15.2;
WARNSify, fix .Nm usage

* free up data after a failed yp_match()
* simplify a two case switch into an if statement...
* remove use of register

Tidy up printf formats in "don't use all lower case" warning
message. From Dave Huang <khym@bga.com>, PR #3198.

remove dangerous sprintf and strcpy calls.

Sync with 4.4BSD-Lite2 (whew!)

Fix a semantic problem reported by Chuck Cranor:

If a user wishes to change a password on a system running YP, and
the master server is not running rpc.yppasswdd, passwd(1) would fail,
even if the user had a local entry. Fix this by checking for local
entry if master is not running rpc.yppasswd iff we defaulted to using
YP (not invoked as "yppasswd" or with "-y").

Slight semantics change: ALWAYS use YP if the system is bound to a
YP server. This is required if the passwd database is to stay in sync
if this program is run on the YP server. Note, local passwd database
operations can still be performed by passing the -l flag.

Also, some minor cleanup and RCS id police.

Fix bug bin/789 with my fix.

Fix the bug that stopped a user from changing his yp passwd when
the entry was ::. (Also allows root to change the empty password.)

branches: 1.6.2;
pr#416

branches: 1.5.2;
few minor things, one pointed out by <kuku@acds.physik.rwth-aachen.de>

rationalize & cleanup -y/-k/-l code
update man page for -y
yp password setting now works again!
relax passwd setting retry code a teeny bit

Add RCS identifiers.

Change NIS--> YP

Add YP support.

Convert TNF licenses to new 2 clause variant

branches: 1.2.26;
infomration -> information.

Magor rework of passwd(1) for the PAM case. Add "-d <database>" option,
similar to Solaris's "-r <repository" or Mac OS X's "-i <infosystem>",
to select the password database (files, nis, krb5). Otherwise, we default
to using whatever PAM decides.